A couple security questions

[R2D2]

Forgive me if these questions have been asked and answered before, but I searched for the answers to them, and couldn't find anything....so here goes:

I am setting up security in my access database. Rather than using the access security wizard, I have things set up where it prompts the user to log in using their oracle username and password. The database has a front end/back end setup, where all my data is stored in tables in the back end database, and my front end database is the actual application that links to these tables and allows users to query this data. Is there someway to prevent someone from being able to link to or import from this back end database (apart from the links built into my front-end application)? My understanding is that I have to have this back end database shared out on the LAN to all the users who have access to the front end database, but because we restrict their access to particular records, we don't want them being able to get at the data in my back end database. How do I accomplish this?

Also, I have my front end database set up so that the shift key no longer works to bypass the autoexec macro. I know there are ways to change this property by using another database. How can I set things up so that this can't be changed through another database?

 

[R2D2]

*bump*

Anyone?

 

[pacsfo]

back end security

Try setting up security for the back end db (security for the front end is kind of irrelevant if you compile it).
You can use the same security file for both (the .mdw file) and set the default user access ('Admin' user) to the back end tables to 'no access' (uncheck all boxes). Make sure you keep another admin user with all priviledges.
If somebody tries to open the db bypassing the mdw, then they'll get in under Admin and in theory they shouldn't be able to read the tables...